CVE-2015-1481
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.1%
from disclosure to weapon0 days
Published on NVDFeb 4
1st PoCJan 14
exploitation probability
6.1%top 7% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/35786unverifiedcve_referencepacketstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.htmlunverifiedcve_referencewww.exploit-db.com/exploits/35786unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.htmlhttp://seclists.org/fulldisclosure/2015/Jan/52https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txthttp://www.exploit-db.com/exploits/35786http://www.securityfocus.com/archive/1/534464/100/0/threaded